Cited by 534Information and Cyber SecurityNetwork Security and Intrusion DetectionInformation Technology Governance and Strategy

The DOI matches its Crossref record, with a small difference in title or year; 2 of the 2 references it cites were found in a registry or an index.

Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology

Open access

Cichonski, Paul, Millar, Tom, Grance, Tim, Scarfone, Karen·2012

DOI 10.6028/nist.sp.800-61r2

Open this paper in CoChat — free account

Abstract

This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347.NIST is responsible for developing information security standards and guidelines, including minimum requirements for Federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate Federal officials exercising policy authority over such systems.This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), Securing Agency Information Systems, as analyzed in Circular A-130, Appendix IV: Analysis of Key Sections.Supplemental information is provided in Circular A-130, Appendix III, Security of Federal Automated Information Resources.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on Federal agencies by the Secretary of Commerce under statutory authority.Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other Federal official.This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States.

Integrity signals

Registry

Crossref · 10.6028/nist.sp.800-61r2

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Guide to test, training, and exercise programs for IT plans and capabilities
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41
Self-citation
Recommended security controls for federal information systems and organizations
Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8

Show all 2 references

Sorted by citations

Items 201–300 of 534

Improved Cyber Defense Modeling Framework for Modeling and Simulating the Lifecycle of Cyber Defense Activities
Kim, D., Ahn, M. K., Lee, S., Lee, D., Park, M., & Shin, D. (2023) · IEEE Access · doi:10.1109/access.2023.3324901 · Cited by 7
Effective Communication as A Pillar of Cybersecurity: Managing Incidents and Crises in the Digital Era
Covarrubias, J. Z. L. (2025) · Journal of risk analysis and crisis response · doi:10.54560/jracr.v15i2.564 · Cited by 7
Business process analytics: a dedicated methodology through a case study
Delias, P., Doumpos, M., & Matsatsinis, N. F. (2015) · EURO Journal on Decision Processes · doi:10.1007/s40070-015-0050-4 · Cited by 7
Metrics and Indicators of Information Security Incident Management: A Systematic Mapping Study
Cadena, A., Gualoto, F., Fuertes, W., Tello-Oquendo, L., Andrade, R., Tapia, F., & Torres, J. (2019) · Smart innovation, systems and technologies · doi:10.1007/978-981-13-9155-2_40 · Cited by 7
Evaluation of Information Elements in a Cyber Incident Report
Lif, P., Varga, S., Wedlin, M., Lindahl, D., & Persson, M. (2020) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw51379.2020.00012 · Cited by 7
Disconnection-Aware Attack Detection and Isolation With Separation-Based Detector Reconfiguration
Sasahara, H., Ishizaki, T., Imura, J., & Sandberg, H. (2021) · IEEE Transactions on Control Systems Technology · doi:10.1109/tcst.2021.3118213 · Cited by 7
Security Operations Centers: A Holistic View on Problems and Solutions
Shutock, M., & Dietrich, G. B. (2022) · Hawaii International Conference on System Sciences (HICSS) · doi:10.24251/hicss.2022.907 · Cited by 7
Policy-Based Profiles for Network Intrusion Response Systems
Hughes, K., McLaughlin, K., & Sezer, S. (2022) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr54599.2022.9850304 · Cited by 7
Investigating the work practices of network security professionals
Adnan, M., Just, M., Baillie, L., & Kayacık, H. G. (2015) · Information and Computer Security · doi:10.1108/ics-07-2014-0049 · Cited by 7
Defensive computer worms: an overview
Al-Salloum, Z. S. (2012) · International Journal of Security and Networks · doi:10.1504/ijsn.2012.048479 · Cited by 7
Telepsychiatry in Asperger’s syndrome
Clarke, C. (2017) · Irish Journal of Psychological Medicine · doi:10.1017/ipm.2017.19 · Cited by 7
APTGen: An Approach towards Generating Practical Dataset Labelled with Targeted Attack Sequences
Takahashi, Y., Shima, S., Tanabe, R., & Yoshioka, K. (2020) · Cited by 7
Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule:
Marron, J. A. (2022) · doi:10.6028/nist.sp.800-66r2.ipd · Cited by 7
Retracted
Cybersecurity framework profile for hybrid satellite networks (HSN)
McCarthy, J., Mamula, D., Brule, J., Meldorf, K., Jennings, R., Wiltberger, J., Thorpe, C., Dombrowski, J., Lattin, O., & Sepassi, S. (2022) · doi:10.6028/nist.ir.8441 · Cited by 7
Foundational PNT profile :
McCarthy, J., Li-Baboud, Y.-S., Brule, J., & Meldorf, K. (2023) · doi:10.6028/nist.ir.8323r1 · Cited by 7
Incident Response Recommendations and Considerations for Cybersecurity Risk Management:
Nelson, A. J. (2024) · doi:10.6028/nist.sp.800-61r3.ipd · Cited by 7
Retracted
Cybersecurity Challenges in Smart Grid IoT
Buksh, Z., Sharma, N. A., Chand, R. R., Kumar, J., & Ali, A. B. M. S. (2025) · Wiley eBooks · doi:10.1002/9781394279401.ch8 · Cited by 7
Analysing the role of LLMs in cybersecurity incident management
Jones, G., Kasimatis, D., Pitropakis, N., Macfarlane, R., & Buchanan, W. J. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01144-7 · Cited by 6
A Cost-Effective Security Framework to protect micro enterprises: PALANTIR e-commerce use case
Mlakar, I., Jeran, P., Šafran, V., & Logothetis, V. (2021) · International Symposium on Digital Forensics and Security (ISDFS) · doi:10.1109/isdfs52919.2021.9486359 · Cited by 6
Research on Quantitative Prioritization Techniques for Selecting Optimal Security Measures
Jang, J., Jung, S., Ahn, M., Kim, D., Youn, J., & Shin, D. (2024) · IEEE Access · doi:10.1109/access.2024.3433404 · Cited by 6
System for Continuous Collection of Contextual Information for Network Security Management and Incident Handling
Husák, M., Laštovička, M., & Tovarňák, D. (2021) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3465481.3470037 · Cited by 6
Pengembangan Sistem Pemantauan dan Deteksi Serangan pada Ekosistem Rumah Cerdas
Hariyadi, D., Setiawan, C. B., & Setiyadi, B. (2021) · Jurnal Komtika (Komputasi dan Informatika) · doi:10.31603/komtika.v5i2.5861 · Cited by 6
How Much Cloud Can You Handle?
Jaatun, M. G., & Tøndel, I. A. (2015) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2015.38 · Cited by 6
Expanding topological vulnerability analysis to intrusion detection through the incident response intelligence system
Patsos, D., Mitropoulos, S., & Douligeris, C. (2010) · Information Management & Computer Security · doi:10.1108/09685221011079207 · Cited by 6
Prerequisites for building a Computer Security Incident Response capability
Mooi, R., & Botha, R. A. (2015) · Information Security for South Africa · doi:10.1109/issa.2015.7335057 · Cited by 6
Digital forensic investigations at universities in South Africa
Charles, T., & Pollock, M. (2015) · International Conference on Information Security and Cyber Forensics (InfoSec) · doi:10.1109/infosec.2015.7435506 · Cited by 6
Forensic Profiling of Cyber-Security Adversaries based on Incident Similarity Measures Interaction Index
Kebande, V. R., Karie, N. M., Wario, R. D., & Venter, H. S. (2018) · International Conference on Intelligent and Innovative Computing Applications · doi:10.1109/iconic.2018.8601279 · Cited by 6
IP Traffic Generator Using Container Virtualization Technology
Fujdiak, R., Uher, V., Mlýnek, P., Blažek, P., Sláčik, J., Sedláček, V., Mišurec, J., Volkova, M., & Chmelař, P. (2018) · International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT) · doi:10.1109/icumt.2018.8631248 · Cited by 6
CSIHO: An Ontology for Computer Security Incident Handling
Moreira, G. B., Calegario, V. M., Duarte, J. C., & dos Santos, A. F. P. (2018) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg.2018.4239 · Cited by 6
“Hello are you available?” Dealing with online frauds and the role of forensic science
Olivier Ribaux, A., & Souvignet, T. R. (2020) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2020.300978 · Cited by 6
Kerberoasting: Case Studies of an Attack on a Cryptographic Authentication Technology
Demers, D., & Lee, H. (2022) · International Journal of Cybersecurity Intelligence and Cybercrime · doi:10.21428/cb6ab371.a2f864bd · Cited by 6
Hypervisor Assisted Forensics and Incident Response in the Cloud
Urias, V. E., Stout, W. M. S., Loverro, C., & Young, J. W. (2016) · IEEE International Conference on Computer and Information Technology (CIT) · doi:10.1109/cit.2016.104 · Cited by 6
Incident response requirements for distributed security information management systems
Mitropoulos, S., Patsos, D., & Douligeris, C. (2007) · Information Management & Computer Security · doi:10.1108/09685220710759568 · Cited by 6
A BI Solution to Identify Vulnerabilities and Detect Real-Time Cyber-Attacks for an Academic CSIRT
Reyes, F., Fuertes, W., Tapia, F., Toulkeridis, T., Aules, H., & Pérez, E. (2018) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-01177-2_82 · Cited by 6
Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN)
McCarthy, J., Mamula, D., Brule, J., Meldorf, K., Jennings, R., Wiltberger, J., Thorpe, C., Dombrowski, J., & Lattin, O. (2023) · doi:10.6028/nist.ir.8441.ipd · Cited by 6
Retracted
Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure
McCarthy, J. M., Grayson, N. R., Brule, J., Cottle, T., Dinerman, A., Dombrowski, J., Long, J., Quigg, K., Thompson, M., Townsend, A., et al. (2023) · doi:10.6028/nist.ir.8473.ipd · Cited by 6
Retracted
LLM-Based Automated Generation and Tri-Modal Representation of Cyber Attack Scenario
Roh, S.-H., & Kim, T.-S. (2025) · IEEE Access · doi:10.1109/access.2025.3597850 · Cited by 5
Análisis de la capacidad de ciberseguridad para la dimensión tecnológica en Colombia: una mirada sistémica desde la organización
Patiño, A. M. S., & Ramírez, D. P. G. (2019) · Ingenieria Solidaria · doi:10.16925/2357-6014.2019.02.07 · Cited by 5
Cybersecurity and Interoperability of Aviation Safety Service Ecosystem
Niraula, M. (2022) · Integrated Communications, Navigation and Surveillance Conference (ICNS) · doi:10.1109/icns54818.2022.9771482 · Cited by 5
The benefits of a cyber-resilience posture on negative public reaction following data theft
Toma, T., Décary-Hêtu, D., & Dupont, B. (2023) · Journal of Criminology · doi:10.1177/26338076231161898 · Cited by 5
Guide to developing case-based attack scenarios and establishing defense strategies for cybersecurity exercise in ICS environment
Kim, D., Jeon, S., Kim, K., Kang, J., Lee, S., & Seo, J. T. (2024) · The Journal of Supercomputing · doi:10.1007/s11227-024-06273-9 · Cited by 5
An Improved Framework for Incident Handling
Usmani, K. A., Mohapatra, A. K., & Prakash, N. (2013) · Information Security Journal A Global Perspective · doi:10.1080/19393555.2012.751565 · Cited by 5
Making Sense of Future Cybersecurity Technologies: Using Ontologies for Multidisciplinary Domain Analysis
Vishik, C., & Balduccini, M. (2015) · Springer eBooks · doi:10.1007/978-3-658-10934-9_12 · Cited by 5
Cloud incident response model
Adamov, A., & Carlsson, A. (2016) · IEEE East-West Design & Test Symposium (EWDTS) · doi:10.1109/ewdts.2016.7807665 · Cited by 5
Secure Internet of Things Deployment in the Cement Industry: Guidance for Plant Managers
McNeil, P. (2017) · IEEE Industry Applications Magazine · doi:10.1109/mias.2017.2739833 · Cited by 5
Information Sharing for Cyber Threats
Rizov, V. (2018) · Information & Security An International Journal · doi:10.11610/isij.3904 · Cited by 5
A Structured Approach to Guide the Development of Incident Management Capability for Security and Privacy
Tello-Oquendo, L., Tapia, F., Fuertes, W., Andrade, R., Erazo, N. S., Torres, J., & Cadena, A. (2019) · International Conference on Enterprise Information Systems · doi:10.5220/0007753503280336 · Cited by 5
Context-Aware Software-Defined Networking for Automated Incident Response in Industrial Networks
Patzer, F., Lüdtke, P., Meshram, A., & Beyerer, J. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-49443-8_7 · Cited by 5
An Empirical Study of CERT Capacity in the North Sea
Jaatun, M. G., Bodsberg, L., Grøtan, T. O., & Moe, M. E. G. (2020) · International Conference on Cyber Security and Protection of Digital Services (Cyber Security) · doi:10.1109/cybersecurity49315.2020.9138865 · Cited by 5
Measuring efficacy of a classroom training week for a cybersecurity training exercise
Deckard, G. M., & Camp, L. J. (2016) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2016.7568940 · Cited by 5
The THREAT-ARREST Cyber-Security Training Platform
Soultatos, O., Fysarakis, K., Spanoudakis, G., Koshutanski, H., Damiani, E., Beckers, K., Wortmann, D., Bravos, G. N., & Ioannidis, M. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-42051-2_14 · Cited by 5
Protocolo de informática forense ante ciberincidentes en telemedicina para preservar información como primera respuesta
Tejo-Machado, N., Basile, F. R. M., Amate, F. C., & López, L. J. R. (2021) · Revista Científica General José María Córdova · doi:10.21830/19006586.726 · Cited by 5
Collective computer incident response using cognitive maps
Krichène, J., Hamdi, M., & Boudriga, N. (2005) · Conference proceedings/Conference proceedings - IEEE International Conference on Systems, Man, and Cybernetics · doi:10.1109/icsmc.2004.1398448 · Cited by 5
Harmonization among national cyber security and cybercrime response organizations: New challenges of cybercrimePreprint
Jang, Y., & Lim, B. Y. (2013) · arXiv (Cornell University) · doi:10.48550/arxiv.1308.2362 · Cited by 5
Small Business Information Security
Vail, J. (2012) · The Scholarship East Carolina University's Institutional Repository (East Carolina University) · Cited by 5
Information Assurance Directorate
Klingensmith, W. (2024) · doi:10.18260/1-2--25310 · Cited by 5
Data Integrity: Recovering from Ransomware and Other Destructive Events
McBride, T., Ekstrom, M. P., Lusty, L., Sexton, J., & Townsend, A. (2020) · doi:10.6028/nist.sp.1800-11 · Cited by 5
Automated Scripting for Real-Time Responses to Suspicious User Actions
Yeboah, F. A., Ashok, M., Keerthi, B. S., Rani, D. L., Kumar, G. S. A., Harshitha, K., Sukeerthi, K., Soujanya, L., Varun, P. S. S., Vaishnavi, P. T. S., et al. (2024) · IEEE International Conference on Computing and Machine Intelligence (ICMI) · doi:10.1109/icmi60790.2024.10585642 · Cited by 4
Cyber Situational Awareness in Vehicle Security Operations: Holistic Monitoring and a Data Model
Grimm, D., Zink, M., Schindewolf, M., & Sax, E. (2024) · International Conference on Network and Service Management (CNSM) · doi:10.23919/cnsm62983.2024.10814319 · Cited by 4
Security Operation Center Methodology for 5G Networks
Orsós, M., Török, R., Faragó, C., Antalfia, B., Kail, E., & Bánáti, A. (2025) · Acta Polytechnica Hungarica · doi:10.12700/aph.22.2.2025.2.6 · Cited by 4
Innovating Cyber Defense with Tactical Simulators for Management-Level Incident Response
Gernhardt, D., Groš, S., & Gledec, G. (2025) · Information · doi:10.3390/info16050398 · Cited by 4
O-Cloud Security: A Comprehensive Survey of Threats, Mitigation Strategies, and Future Directions
Shehab, M., Aly, Y., Badawy, A., Mohamed, A. M. S., Barhamgi, M., & Salem, S. (2025) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2025.3600528 · Cited by 4
Detection of DoS attacks exploiting SUBSCRIBE messages of the MQTT protocol
Dikii, D. I., & Tikhomirov, A. (2020) · International Journal of Computers and Applications · doi:10.1080/1206212x.2020.1846945 · Cited by 4
Cybersecurity: Notorious, but Often Misused and Confused Terms
Kolouch, J., Tovarňák, D., Plesník, T., & Javorník, M. (2023) · Masaryk University Journal of Law and Technology · doi:10.5817/mujlt2023-2-5 · Cited by 4
The optimistic bias in cyber risk perception of German enterprises: do organizational and personal moderators matter?
Salzberger, A. (2025) · Organizational Cybersecurity Journal Practice Process and People · doi:10.1108/ocj-02-2024-0003 · Cited by 4
A Countermeasure Recommendation System against Targeted Attacks with Preserving Continuity of Internal Networks
Hasegawa, H., Yamaguchi, Y., Shimada, H., & Takakura, H. (2014) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac.2014.63 · Cited by 4
Operationalizing the coordinated incident handling model
Daley, R. A., Millar, T., & Osorno, M. (2011) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/ths.2011.6107886 · Cited by 4
Self-citation
A Study on Unknown Malware Detection using Digital Forensic Techniques
Lee, J., & Lee, S. (2014) · 정보보호학회논문지 · doi:10.13089/jkiisc.2014.24.1.107 · Cited by 4
Passing the Buck: Outsourcing Incident Response Management
Zúñiga, A. R. R., & Jaatun, M. G. (2015) · IEEE International Conference on Cloud Computing Technology and Science · doi:10.1109/cloudcom.2015.42 · Cited by 4
Preparing for GDPR: helping EU SMEs to manage data breaches
Kapoor, K., Renaud, K., & Archibald, J. (2018) · Abertay Research Portal (Abertay University) · Cited by 4
A Forensic Investigation of Robot Operating System
Abeykoon, I., Feng, X., & Qiu, R. (2017) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc-picom-datacom-cyberscitec.2017.77 · Cited by 4
European Union ∙ Synergies in Cybersecurity Incident Reporting – The NIS Cooperation Group Publication 04/20 in Context
Schmitz-Berndt, S., & Anheier, F. (2021) · European Data Protection Law Review · doi:10.21552/edpl/2021/1/13 · Cited by 4
Cyber-Informed Engineering for Nuclear Reactor Digital Instrumentation and Control
Eggers, S. L., & Anderson, R. S. (2022) · IntechOpen eBooks · doi:10.5772/intechopen.101807 · Cited by 4
Use Cases and Design of an Intelligent Intrusion Detection System
Roponena, E., Kampars, J., Grabis, J., & Mosāns, G. (2022) · Baltic Journal of Modern Computing · doi:10.22364/bjmc.2022.10.4.06 · Cited by 4
Recommending Similar Devices in Close Proximity for Network Security Management
Bouček, V., & Husák, M. (2023) · IEEE International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob) · doi:10.1109/wimob58348.2023.10187729 · Cited by 4
Entropy-extreme model for predicting the development of cyber epidemics at early stages
Kovtun, V. V., Grochla, K., Al‐Maitah, M., Saad, A., & Kempa, W. M. (2024) · Computational and Structural Biotechnology Journal · doi:10.1016/j.csbj.2024.08.017 · Cited by 4
Practical implementation of a methodology for digital images authentication using forensics techniques
Rodríguez-Santos, F., Delgado-Gutiérrez, G., Palacios-Luengas, L., & Vázquez‐Medina, R. (2015) · Advances in computer science : an international journal · Cited by 4
CATEGORIZATION OF CYBER TRAINING ENVIRONMENTS FOR INDUSTRIAL CONTROL SYSTEMS
Plumley, E. G., Rice, M., Dunlap, S., & Pecarina, J. M. (2017) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-70395-4_13 · Cited by 4
Malware Containment in Cloud
Malvankar, A., Payne, J., Budhraja, K. K., Kundu, A., Chari, S. T., & Mohania, M. (2019) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa48467.2019.00036 · Cited by 4
Knowledge management for information security incident handling at Security Operation Center of Jakarta Provincial Government
Firmansyah, M., & Yuswanto, A. (2022) · Monas Jurnal Inovasi Aparatur · doi:10.54849/monas.v4i2.102 · Cited by 4
Developing a Metrics Framework for the Federal Government in Computer Security Incident Response
Sritapan, V., Stewart, W., Zhu, J., & Rohm, C. E. T. (2014) · Communications of the IIMA · doi:10.58729/1941-6687.1170 · Cited by 4
Enhancing interoperability of security operation center to heterogeneous intrusion detection systems
Lin, A. C.-C., Wong, H.-K., & Wu, T. (2005) · IEEE International Carnahan Conference on Security Technology (ICCST) · doi:10.1109/ccst.2005.1594841 · Cited by 4
Environmental Authentication in Malware
Blackthorne, J., Kaiser, B., Fuller, B. W., & Yener, B. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-25283-0_20 · Cited by 4
Automated Incident Response for Industrial Control Systems Leveraging Software-defined Networking
Patzer, F., Meshram, A., & Heß, M. (2019) · International Conference on Information Systems Security and Privacy (ICISSP) · doi:10.5220/0007359503190327 · Cited by 4
Cyber Security Operations Centre Concepts and Implementation
Agyepong, E., Cherdantseva, Y., Reinecke, P., & Burnap, P. (2020) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-3149-5.ch006 · Cited by 4
A Decision Support System for IT Security Incident Management
Rauchecker, G., Yasasin, E., & Schryen, G. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-09770-1_4 · Cited by 4
Exploring the applicability of SIEM technology in IT security
Chikonga, M. (2014) · Tuwhera (Auckland University of Technology) · Cited by 4
Smart Grid Cybersecurity: Job Performance Model Report
O’Neil, L. R., USDOE, Assante, M. J., & Tobey, D. H. (2012) · doi:10.2172/1062512 · Cited by 4
Forensic Analysis of Physical Memory and Page File
Iqbal, H. (2009) · NORA - Norwegian Open Research Archives · Cited by 4
Foundational PNT Profile:
Bartock, M. (2022) · doi:10.6028/nist.ir.8323r1.ipd · Cited by 4
Retracted
Protecting Radiology Data and Devices Against Cybersecurity Threats: A Joint White Paper of the American College of Radiology (ACR) and Society for Imaging Informatics in Medicine (SIIM)
Chen, P., Desjardins, B., Strassner, B., Forghani, R., Bodak, R., Gichoya, J. W., Whitfill, J. T., Ehman, E. C., & Wald, C. (2025) · Journal of Imaging Informatics in Medicine · doi:10.1007/s10278-025-01621-4 · Cited by 3
Secure Cyber-Physical Data Monitoring Architecture for Real-Time Fault Detection in U.S. Industrial Automation Systems
Nazir, M. S. (2026) · doi:10.63125/exzc2653 · Cited by 3
Aspects of Social Engineering and Its Modalities to Countercharge and Prevent It
Greavu-Şerban, V., & CONSTANTIN, F. (2022) · Informatica Economica · doi:10.24818/issn14531305/26.3.2022.01 · Cited by 3
Information Security Incident Handling Regulation
Iakovleva, A., Zhukova, M., & Strekaleva, T. V. (2023) · International Russian Smart Industry Conference (SmartIndustryCon) · doi:10.1109/smartindustrycon57312.2023.10110721 · Cited by 3
Mobile Technologies at Risk: A Literature Review on the Evolving Challenges and Solutions in Mobile Technology Security
Stanfield, M. (2024) · Scientific Bulletin · doi:10.2478/bsaft-2024-0016 · Cited by 3
An Interdisciplinary Thematic Analysis of the US National Guard Bureau Response to the SolarWinds Attack
Amador, T. K., Mancuso, R. A., Fulton, S. P., Moore, E. L., & Likarish, D. M. (2024) · IFIP advances in information and communication technology · doi:10.1007/978-3-031-72559-3_18 · Cited by 3
Designing a security incident response process for self-sovereign identities
Ziegler, L., Grabatin, M., Pöhn, D., & Hommel, W. (2025) · EURASIP Journal on Information Security · doi:10.1186/s13635-025-00195-6 · Cited by 3
Safeguarding Virtual Healthcare: A Novel Attacker-Centric Model for Data Security and Privacy
Herath, S., Gelman, H., Hastings, J., & Wang, Y. (2024) · International Conference on Computer and Applications (ICCA) · doi:10.1109/icca62237.2024.10927870 · Cited by 3
Analyzing Systemic Failures in IT Incident Management: Insights from Post-Mortem Analysis
Arifiansyah, F. (2025) · Eduvest - Journal Of Universal Studies · doi:10.59188/eduvest.v5i5.51192 · Cited by 3
Topology-aware vulnerability mitigation worms
Al-Salloum, Z. S. (2011) · Royal Holloway Digital Repository (Royal Holloway University of London) · Cited by 3

Authors: Cichonski, P., Millar, T., Grance, T., & Scarfone, K.
Affiliations: National Institute of Standards and Technology (US)
United States Department of Homeland Security (US)
ORCID: Scarfone, Karen
Publisher: National Institute of Standards and Technology
Published: 2012-08
DOI: 10.6028/nist.sp.800-61r2
OpenAlex: W2617200927
Cited by: 485
References: 2
Citations by year: 2026: 25 · 2025: 37 · 2024: 38 · 2023: 33 · 2022: 43 · 2021: 44 · 2020: 40 · 2019: 26 · 2018: 26 · 2017: 21 · 2016: 20 · 2015: 31 · 2014: 23 · 2013: 11 · 2012: 19
Type: report
Language: en
Update notices: new_version (2025-04-03)
Open access: gold
doi.org
Licence: public-domain
Topics: Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
Keywords: incident response, information security management, FISMA, NIST guidelines, federal information systems, information security standards

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology

Abstract

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks